streamx/magento-connector

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months, indicating a meaningful maintenance slowdown for a package that has ongoing releases.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a transparency and maintenance gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The only workflow uses two unpinned actions, and the audit found a high-confidence template-injection pattern. The workflow has no untrusted checkout or dangerous trigger, so these are workflow hygiene concerns rather than a severe standalone risk.